Skip to main content
IndicatorPublished Updated

ThreatFox IOCs for 2026-08-11

Source ThreatFox MISP Feed

0

TLP:WHITE, disclosure is not limited

Indicators of compromise

Domains 170

  • auracorp.shopAura Stealer botnet C2 domain (confidence level: 100%)
  • bluepiip.digitalUnknown malware payload delivery domain (confidence level: 100%)
  • nduzuc.get-goldalign.comClearFake payload delivery domain (confidence level: 100%)
  • dbfvnqy.en-us--sightfresh.comClearFake payload delivery domain (confidence level: 100%)
  • qvmmaxk.en-us--sightfresh.comClearFake payload delivery domain (confidence level: 100%)
  • wtdqug.get--ignitra.comClearFake payload delivery domain (confidence level: 100%)
  • ae5ap687.healthfoodzone.comClearFake payload delivery domain (confidence level: 100%)
  • direwolfcdkv5whaz2spehizdg22jsuf5aeje4asmetpbt6ri4jnd4qd.onionUnknown malware botnet C2 domain (confidence level: 100%)
  • direwolf66s5zealav7azcyqeipiswecvvnapyuby3dek473kyqfucad.onionUnknown malware botnet C2 domain (confidence level: 100%)
  • direwolf3ddtab5anvhulcelauvoxu2a7l264hqs6vtxtgrqsjfvodid.onionUnknown malware botnet C2 domain (confidence level: 100%)

URLs 62

  • https://bluepiip.digital/t.jsUnknown malware payload delivery URL (confidence level: 100%)
  • http://175.107.36.232:51731/mozi.mMozi payload delivery URL (confidence level: 75%)
  • https://siege-close.com/x9i32md/w1/la02Unknown malware payload delivery URL (confidence level: 100%)
  • https://ban.bercak4d.org/Vidar botnet C2 (confidence level: 100%)
  • https://ban.sm188blood.top/Vidar botnet C2 (confidence level: 100%)
  • https://188.245.165.232Vidar botnet C2 (confidence level: 75%)
  • https://telegram.me/t8l1akVidar botnet C2 (confidence level: 100%)
  • https://smc.tb88cuka.topVidar botnet C2 (confidence level: 100%)
  • https://pik.tb88cuka.topVidar botnet C2 (confidence level: 100%)
  • https://steamcommunity.com/profiles/76561198662103927Vidar botnet C2 (confidence level: 100%)

IP addresses 122

  • 161.35.48.40Aisuru botnet C2 server (confidence level: 100%)
  • 154.213.233.164Cobalt Strike botnet C2 server (confidence level: 50%)
  • 52.202.75.213Cobalt Strike botnet C2 server (confidence level: 50%)
  • 8.147.56.196VShell botnet C2 server (confidence level: 100%)
  • 43.254.166.41Cobalt Strike botnet C2 server (confidence level: 100%)
  • 43.254.166.41Cobalt Strike botnet C2 server (confidence level: 100%)
  • 196.75.175.174Meterpreter botnet C2 server (confidence level: 50%)
  • 176.65.139.228Unknown malware botnet C2 server (confidence level: 50%)
  • 176.65.139.228Unknown malware botnet C2 server (confidence level: 50%)
  • 38.207.178.195Aisuru botnet C2 server (confidence level: 100%)

Hashes 24

  • 333fd9dd9d84b58c4eef84a8d07670ddUnknown malware payload (confidence level: 100%)
  • acd02a4f8b25e9106400e0a3af63a760Unknown malware payload (confidence level: 100%)
  • 7d589f794115171949fa2a7e3b66dcd4Unknown malware payload (confidence level: 100%)
  • a482d7e61ba199cbe005a549249894baUnknown malware payload (confidence level: 100%)
  • 31fe32bddd2bd4b825e355516d852476Unknown malware payload (confidence level: 100%)
  • 3b97927cde6c906f6b6f03797c21efa7Unknown malware payload (confidence level: 100%)
  • 44da29144b151062bce633e9ce62de85Unknown malware payload (confidence level: 100%)
  • 1093b4045b45a8498d146e31788c25769f992056c8ffc582b5d8c06598598966Unknown malware payload (confidence level: 100%)
  • 05e3884a478d3bc8fd7285dabb74107422f1615d2d7f80df9b8438d4beb663daUnknown malware payload (confidence level: 100%)
  • bb9136494a546368e7c9b6252c2e1c5af9327c07947908a9ba6fdd78fb4bf4cfUnknown malware payload (confidence level: 100%)

Description

ThreatFox IOCs for 2026-08-11

Community reviews

Loading reviews…